Skip to content
OpenAdvisories

Archive

July 2005

Vulnerabilities first published in this month (UTC), newest first.

← June 2005 2005 / July August 2005 →
  1. 124
  2. 2 
  3. 3 
  4. 4 
  5. 516
  6. 624
  7. 71
  8. 82
  9. 92
  10. 1075
  11. 1122
  12. 1235
  13. 1328
  14. 14176
  15. 151
  16. 161
  17. 1768
  18. 18 
  19. 1958
  20. 208
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2622
  27. 2722
  28. 283
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

588 results · Feed

  • Unscored —
    CVE-2005-2377

    nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating system…

  • Unscored —
    CVE-2005-2382

    Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which …

  • Unscored —
    CVE-2005-2276 Public exploit

    Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers…

  • Unscored —
    CVE-2005-2380

    Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2005-2375

    Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (appli…

  • Unscored —
    CVE-2005-2369

    Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attack…

  • Unscored —
    CVE-2005-2376

    Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash…

  • Unscored —
    CVE-2005-2333

    Cross-site scripting (XSS) vulnerability in smilies_popup.php in SEO-Board 1.0 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-2334

    Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to (1) w_s3mbf…

  • Unscored —
    CVE-2005-2331

    PHP remote file inclusion vulnerability in display.php in MooseGallery allows remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2005-2330 Public exploit

    Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2005-2328

    PHP remote file inclusion vulnerability in im.php in Laffer 0.3.2.6 and 0.3.2.7 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2005-2332

    Cross-site scripting (XSS) vulnerability in PHPPageProtect 1.0.0a allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2005-2329

    MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key authentication, does not …

  • Unscored —
    CVE-2005-2327 Public exploit

    Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2004-2259

    vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash) via a SIGCHLD signal …

    vsftpd Debian
  • Unscored —
    CVE-2004-2268

    PimenGest2 before 1.1.1 allows remote attackers to obtain the database password via debug information in rowLatex.inc.p…

  • Unscored —
    CVE-2004-2267

    Cross-site scripting (XSS) vulnerability in Ansel 2.1 and earlier allows remote attackers to inject arbitrary HTML or w…

  • Unscored —
    CVE-2004-2282

    DansGuardian before 2.7.7-2 allows remote attackers to bypass URL filters via a ".." in the request.

  • Unscored —
    CVE-2004-2263 Public exploit

    SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to …

  • Unscored —
    CVE-2004-2275 Public exploit EPSS 13%

    i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p …

  • Unscored —
    CVE-2004-2270

    Unknown vulnerability in IBM Parallel Environment (PE) 3.2 and 4.1 allows attackers to execute arbitrary commands as ro…

  • Unscored —
    CVE-2004-2269

    Stack-based buffer overflow in pads.c in Passive Asset Detection System (Pads) might allow local users to execute arbit…

    pads Debian
  • Unscored —
    CVE-2004-2266

    SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL statements via the image par…

  • Unscored —
    CVE-2004-2276

    F-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba Servers, and 4.52 and earli…

  • Unscored —
    CVE-2004-2258

    Xconfig in Hummingbird Exceed before 9.0.0.1, when the Screen Definition is password-protected, allows local users to a…

  • Unscored —
    CVE-2004-2280 Public exploit

    Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial …

  • Unscored —
    CVE-2004-2274

    Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of …

  • Unscored —
    CVE-2004-2283

    Unknown vulnerability in DansGuardian before 2.6.1-13 allows remote attackers to bypass URL filters via a crafted reque…

  • Unscored —
    CVE-2004-2262 Public exploit EPSS 15%

    ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to…

  • Unscored —
    CVE-2004-2279

    Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2004-2264

    Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to …

  • Unscored —
    CVE-2004-2284

    The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute…

  • Unscored —
    CVE-2004-2260

    Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which al…

  • Unscored —
    CVE-2004-2277 Public exploit

    Buffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of service (crash) and possi…

  • Unscored —
    CVE-2004-2272

    Buffer overflow in the sockFinger_DataArrival function in efFingerD 0.2.12 allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2004-2271 Public exploit EPSS 72%

    Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET re…

  • Unscored —
    CVE-2004-2273

    efFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon crash) via a packet with a single byte, w…

  • Unscored —
    CVE-2004-2261

    Cross-site scripting (XSS) vulnerability in e107 allows remote attackers to inject arbitrary script or HTML via the "lo…

  • Unscored —
    CVE-2004-2281

    Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and a…